Privacy Policy
This page explains what data is collected when you use this 2-person peer-to-peer video call service ("the service"), how it is used, and who it is shared with. By using the service you agree to this policy.
1. Who runs this service
This is a personal project operated by an individual. For questions, contact: sumanbhadrasuman@gmail.com.
2. No accounts, no profiles
You do not register, sign in, or provide any personal information to use the call. Rooms are identified only by a random ID you generate in your browser.
3. What is collected on the server
The signaling server keeps short-lived technical logs containing:
- Your public IP address
- Your browser's User-Agent string
- The HTTP path you requested and timestamps
- A random per-session peer ID
- The room name you joined (kept in memory only, deleted when the room empties)
These logs help diagnose abuse and connectivity issues. They are stored on the server's local disk and are not sold or shared with third parties.
4. Operator notifications
To monitor abuse and uptime, the server sends a notification to the operator's private Telegram channel each time someone joins or leaves a room. The notification includes: your IP address, approximate location (city / region / country, derived from your IP — not GPS), User-Agent, peer ID, the first few characters of the room ID, and the timestamp. It is visible only to the operator.
5. Peer-to-peer media
Once you and the other participant are connected, your camera, microphone, and (optionally) screen-share video flow directly between the two browsers using WebRTC. The server does not see, store, or relay your audio/video content. End-to-end encryption (DTLS-SRTP) is built into WebRTC by default.
However, WebRTC requires the two peers to exchange network addresses in order to connect. This means the other participant's browser will learn your IP address (and vice versa). If you do not want to share your IP, use a VPN or do not join the call.
6. STUN / TURN servers
To traverse firewalls, the service uses public STUN servers
(operated by Google) and a public TURN relay
(openrelay.metered.ca). Your IP address is briefly
shared with these third parties as part of standard WebRTC
connectivity. When a TURN relay is used, your encrypted media
packets pass through that relay but cannot be decrypted by it.
7. IP geolocation lookup
For the operator notification described in section 4, your IP address is sent to ip-api.com to determine an approximate city / country. See their privacy policy.
8. Cookies
This site does not set any cookies and does not run third-party
advertising or analytics scripts. The room ID and optional
password are stored only in the URL fragment (after #)
in your browser's address bar — they are never sent to the server
as part of the URL.
9. Data retention
- Room state is kept in memory only and deleted when the room is empty.
- Server access logs may be retained for up to 90 days for security/debugging.
- Telegram operator notifications remain in the operator's private channel until manually deleted.
- Audio/video content is never stored — it is sent peer-to-peer in real time.
10. Children
This service is not directed at children under 13. If you are under 13, please do not use the service.
11. Your rights
If you are in the EEA / UK, you have rights under GDPR including access, correction, deletion, and objection. To exercise any of these rights, email sumanbhadrasuman@gmail.com.
12. Changes
This policy may be updated from time to time. The "Last updated" date at the top of the page reflects the most recent change.